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Introduction. In the first paper Q of this series we constructed a family of 
lattices in dimensions 2"^^ for positive integers n. From the theory of elliptic 
curves over function fields we obtained upper bounds on the discriminants and 
lower bounds on the minimal norms of these lattices, showing that their associ- 
ated lattice packings of spheres equal the previous records for n ^ 4 and exceed 
them for 5 ^ n ^ 9. We then showed, for n = 5 (the first case of a new record), 
that our lower bound on the density of the lattice packing in R^^ is sharp, and 
reported on the computation of the kissing number of the lattice, which was at 
the time the largest kissing number known in R^"*. Both of these records have 
since been superseded by G. Nebe and the kissing number was pushed still 
higher by a nonlattice packing Thus n = 6 is now the first case in which 
the construction of Q yields a previously unknown lattice of record density. 

In this paper we analyze this 128-dimensional lattice MW^s- We determine its 
density, again showing that the lower bound from |^ is sharp by proving that 
the elliptic curve (see (^ below) has trivial Tate-Safarevic group and nonzero 
rational points of height 22, as small as possible by jj. Prop. 2]. We then report 
on a computation that determined all the rational points of that minimal height, 
thus obtaining the kissing number of MWi2s- Like the packing density, the 
kissing number of MWi2s is by a considerable factor the largest known kissing 
number of a lattice in this dimension, though once more |^ gives a much larger 
nonlattice kissing configuration. 

MWi2s is the Mordell-Weil lattice of an elliptic curve (|l|) over the rational 
function field k{t), where A; is a finite field of 2^^ elements. To compute the 
minimal vectors of MW128 we listed all solutions in fc of a system of simultaneous 
nonlinear equations in several variables (the coefficients of polynomial 
in t). We reduced the search space by using the automorphisms of MW128 
described in and solving for some of the variables. This left about 2 • 10^^ 
possibilities on which to check the remaining, now much more complicated, 
equations. An exhaustive search over this space would still take months on a 
single fast computer. Fortunately the first of these equations can be written 
as a quadratic in one of the variables; this reduced the search space by three 
orders of magnitude, to the point that the computer time was comparable to the 
time it took to program the search. The relatively simple form of that equation, 
though welcome, was unexpected and is still unexplained. This is one of several 
open questions we raise in the concluding section of the present paper. 
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statement of results. 

To simplify notation we henceforth denote the lattice MW128 by M. 

Let A: be a finite field of 2^^ =4096 elements, let K be the rational function field 
k{t), and let E/K be the potentially constant elliptic curve 

y^ + y = x'' + t^^ + ae, (1) 

where ag is any of the 2^^ elements of k whose absolute trace J2m=o ^f" equals 1. 
(As noted in all these choices of ag yield isomorphic curves; if we worked 

over k — F2 instead of fc, we could drop ag entirely and simplify the equation 
of E to y-^ + y = + 1^^.) Let M be the Mordell-Weil group of E, consisting of 
together with solutions {x,y) G K x K of (|l]). The map 

(f>:E^E, ix,y)^ {x\y'' + f'' + ag) (2) 

is an inseparable 2-isogeny whose square is multiplication by —2. By Thm.2], 
the image of on E{K) is the kernel of the map 

e : E{K) KjK^, ^^ 0, (x, y) ^ x mod (3) 

in which if, have the structure of additive groups. 
Theorem, i) M has rank 128 and trivial torsion. 

ii) The canonical height h on M is given by h{0) = and h{x,y) — degx, the 
degree of x as a rational function oft. This height gives M the structure of an 
even integral lattice in Euclidean space of dimension 128. 

Hi) The Selmer group for 4> is the subspace S of K/K^ represented by the poly- 
nomials of the form 

{x^-^t^^ + X^-^t^^ + X^ft") + (x^^t" + x{^t^) + Xigt" + Xgi^ + ^5*^ + Xit (4) 

with 

Xj S fc, Xi^ — Xi^; (5) 
S is an elementary abelian 2- group of rank 

12 + 12 + 4+12 + 12 + 12 = 64. (6) 

iv) The Tate-Safarevic group of E/K is trivial. The discriminant of AT is 2^^*^. 

v) The minimal norm of M is 22, attained by {x, y) if and only if x, y are 
polynomials in t of degrees 22 and 33 respectively. There are 

218044170240 = 2^^ 3 5 13 19 449 (7) 

vectors of this minimal norm in M . 

vi) The normalized center density of M is 

2^64 ^2^24 _ 297-4036+ ^g^ 
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Proof of parts (i) through (iv): rank, discriminant, and III 

Each of (i), (ii), and the hiipHcation (iii)=5>(iv) is contained in the special case 
(n,q) — (6,64) of our resuhs in Q. We briefly go over these in the next two 
paragraphs. 

Define curves C, Eq over k by 

C:u^ + u = t^^, Eq-.Y^ + Y = + ae. (9) 

Then Eq is a supersingular eUiptic curve, and C is a hypereUiptic curve of 
genus 32 whose Jacobian Jac(C) is isogenous with Eq'^ ^ Prop.l]. The ir- 
rational points of E correspond bijectively with maps from C to Eq that take 
the point at infinity of C to the origin of Eq: such a map is either constant 
or of the form (t,u) > {x{t),y(t) + u) with {x,y) a nonzero point of E. This 
correspondence respects the group laws on E and Eq , and yields an identification 
of M with Hom(Jac(C), £Jo), a group of the same rank as Hom(i?Q^, i?o) = 
End(£;o)^^- Thus M has rank 4 • 32 = 128, as claimed in (i). The formula for 
h and the fact that h{P) £ 2Z for aU P e M are the case {n, q) = (6, 64) of 
i Prop.2]. 

The discriminant of the Mordell-Weil lattice of an elliptic curve over a global 
field is related to the order of the curve's Tate-Safarevic group by the conjecture 
of Birch and Swinnerton-Dyer. In our case of a curve over a function field, 
this conjecture was formulated by Artin and Tate ||] and proved under certain 
hypotheses by Milne In |Q, Thm.l] we observed that these hypotheses 

were satisfied by each of our curves E, and computed the resulting relationship 
between the order of the Tate-Safarevic group III(-B) and the discriminant A 
of its Mordell-Weil lattice. Their product is always a power of 2, so UI{E) 
is a 2-group, and is trivial if and only if III^ is trivial; that is, if and only 
if E{K) / (j){E{K)) is all of the Selmer group for 0. Now E{K) / (j){E(K)) is 
an elementary abelian 2-group whose rank is half the rank of E{K), because 
(jp = —2. In our present case of g = 64, we already know that the half-rank 
is 128/2 = 64, so once we prove (iii) the triviality of Ui{E) will follow. The 
formula of jj, Thm.l] gives 

|m(£;)| A = 2^20, (10) 

for q = 64, so the discriminant claim of (iv) will follow as well. 

It remains to verify that the c/i-Selmer group is given by (^,||). The analysis 
proceeds as in Q (for y'^ + y = + t^^) and ^ (for y"^ + y = x^ + t^^ + ae), 
but takes more steps to complete. As happened there, it is enough to show that 
S is contained in the Selmer group, because it has the correct size 2^^^/^. The 
Selmer group consists of together with all elements of K/K^ that represent 
the x-coordinate of a solution of (|l|) with x,y in A:((t^^)), the completion of K 
at the place t = oo. 

1 As noted in Milne had to also assume odd characteristic, but this assumption was 
later eliminated by work of lUusie M, so we may use Milne's results also in our characteristic-2 
setting. 
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By Thm.2], every element of the ^-Selmer group has a unique representative 
^ that is an odd polynomial in t (that is, a fc-linear combination of P for odd 
positive integers j) whose degree d satisfies 3d < 65 and d = 65 mod 4. Thus d 
is one of 1, 5, 9, 13, 17, 21. We give the proof in the case d = 21, which is also 
relevant to our computation of the minimal vectors. The other cases are similar 
but easier. Alternatively, once we find a single Pq £ M with h{P) = 22, and 
thus with e(Po) represented by a polynomial of degree 21, we know that for any 
other point P at least one of e(P) and e{P + Pq) has d — 21; so once we have 
done d = 21 the other cases will follow. 

Suppose X — X]j=-oo ^j^'' the a;-coordinate of a point of E over k{{t^^)), with 
X21 ^ 0. Necessarily d' = (65 -d)/2 = 22. Let 



77 := 



66 

j = -OD 



(11) 



smce 



X ■ X 




we have 7705 = 2;2ia;22 + 1 and 



for all j 7^ 0,65. By the Lemma in if 7; is of the form 7/^ 
y G then 



m=0 







(12) 

(13) 

1/ for some 
(14) 



for each odd jo > (note that this sum is finite, and the fractional exponents 
make sense in k). Taking jo = 65, 63, 61, ... in (|l4[), and using macsyma to 
simplify the resulting equations, we find: 



Jo 


= 65 : 


jo 


= 63 : 


jo 


= 61 : 


jo 


= 59 : 


jo 


= 57 : 


jo 


= 55 : 


jo 


= 53 : 


jo 


= 51 : 



''22 



-1/2 



1-21 



XigX22 + a;2i = ^ Xig 
2^1 72^99 +2:10X91 -\- Xoi Xnn — 



''21 



_f -1/ -1 , 7 \\l/2 _ 5/2 -1 1/2 

2^20 ~ v2;2i [X21 Xii + X21)) — X21 + X21 X^.j 

15 ~ 2:21 {xi-jx\i + {x\i + x\iXii) + Xj]^) ~ 



X 

2^18 
2^11 

2^16 



-3/2 



-''21 
„8 



-l„l/2 



a^y + a2i 



11/2 2 1/2 

'^21 ~r '^21*^17 

/ 2, 8|42| 2 \ 

2^21 1, 2:13X21 + XiyX2i -t- X2iXig -\- X2iXiyj 



17/2 



^21 



1/2 
21"17 



a,! a 



21 



C7 — 2:21 X] X^X5i_2j 
j=15 



I -2 3/2 
1" 121 '^17 

= ••• =0 



2 1/2 
^21*^13 



„16 



l„l/2 



+ "21 flg 



(15) 
(16) 

(17) 
(18) 
(19) 

(20) 

(21) 
(22) 
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■ _ AQ . _ -1/2 1/2 _ 23/2 8 1/2 I 9/2 

Jo — . — X21 / ^ 2;jX49-2j ~ ^21 ~r ^21^17 + *^21 *^17 

j = 15 

-5/2 2,-2 1/2 5 1/2 -3/2 ,„o\ 

+ 2:21 a;]^7 + X21 Xi;^ X^-j + 2^21-^13 ' •^21 -^13 \'^'^) 

I 2 1/2 I -1 1/2 

+ a;2ia;g + a;2i ^5 
21 

jo = 47 : X3 = X21 ^ a;ia;47_2j ^ ■ ■ ■ ^ x{j (24) 

i=13 

In particular, for each odd j the coefficient Xj depends on the ^ coefficients 
xi, X5, xg, Xi3, Xi7, 2:21 according to (^). To finish the proof of (iii) we must also 
show that a;i3 is in the 16-element subficld of k. Continuing our computation we 
find that the conditions ( p^ ) with jo = 45, 41, 37 yield (increasingly complicated) 
formulas for 2:12, xio, in terms of the coefficients, while the conditions with 
jo — 43, 39, 35 are satisfied automatically. When jo — 33, the first case in which 
the sum in ( p^ ) has more than one term, we obtain a much longer expression 
for xq. When this and our previous formulas are substituted into the jo = 31 
condition Tq^^ = 7752, all but two of the terms cancel, leaving only x\^ + x^^ = 0, 
and we are done. 

This massive cancellation and the simple equations for 0:3, 0:7, Xn, Xis, xig are 
in striking contrast to the increasingly complicated formulas for Xj with j even. 
But the odd-order coefficients are constrained by the requirement that they 
constitute a group. Moreover, the Selmer group inherits the symmetries of M 
coming from the automorphisms of C noted in Eqn.lO]. Namely, if x{t) mod 
is in the Selmer group, then so is x{at + b) mod for all a,b £ k such 
that a^^ — 1. This severely constrains the possibilities for the Selmer group; for 
instance, X15 must vanish, and xig must be proportional to X21, else we could use 
linear combinations of x{at) with a^^ = 1 to obtain a solution in k{{t~^)) of (0) 
with X a square plus a polynomial of degree 19 or 15, contradicting Thm.2]. 
(Similar arguments arise in Dummigan's investigation ||] of the Tate-Safarevic 
groups of certain constant elliptic curves related to those of The even- 

order coefficients need not constitute a group, but are still constrained by the 
invariance under the 65 • 2^^ transformations 1 1-^ at + b; this provides a sanity 
check on our formulas for those coefficients. 

Parts (v) and (vi): minimal norm, density, and kissing number 

By Thm.l], any nonzero {x,y) £ M has height at least 22, with equality if 
and only if a;, y are polynomials in t of degrees 22 and 33. Thus we can prove 
that M has minimal norm 22, and normalized norm density given by (^), b 
finding a single such pair {x,y). To verify that the kissing number is given by (| 
we must enumerate all (x, y) of that form. 

To find these {x, y), set Xj — for all j < 0, write r]j (0 < j < 66) as polynomials 
in Xo, . . . , a;22) and solve ( p^ for each odd jo < 65 together with the equation 

% 2/(0)' + 2/(0) + ae (25) 
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for the constant coefficient y{0) of y. We have aheady used the equations for 
jo ^ 35 to solve for all Xj except xo,X2,X4 in terms of the ^ coefficients; the 
jo = 29 and jo = 25 equations give us Xi and X2 as well, and jo = 21 determines 
Xq + Xq. (We already saw in |Q, Eqn.21] that, due to automorphisms of Eq of 
order 4, if (a;, y) G M and = c then a; + c is also the x-coordinate of a rational 
point of E; thus even once we know all Xj for j > we can at most determine 
Xq + Xq, not Xq.) Meanwhile, the jo = 23 equation simphfies to xl?^^ = 1, which 
only confirms that X21 S k* . The remaining ten equations, for jo = 19 through 
jo = 1, yield complicated polynomial equations in the six 1^ coefficients. 

Finding a single solution turns out to be easy: set 0:21 = 1 and 0:17 — X13 = 
Xq = Xq ^ 0, when the equations for jo ^ 25 give 

X = f^+f^+t^"+t'^+t''+t''+t'^+Xit'^+t'' 

+ {Xi + + Xit^ + Xit^ + {Xi + Ijf^ + xjf + xjt + Xq, (26) 

and the jo = 19, 21 equations yield the conditions 

xl + Xi + 1 = 0, Xq + Xq = Xi (27) 

on the unknown coefficients xq,xi. We calculate that the equations (|l^) for 
the remaining jo are then satisfied automatically, leaving only (|2^), which as 
expected has solutions y(0) S k. (In all 8 solutions of (p7|), xi and xq are of 
degrees 2,4 respectively over F2; thus Xq is a fifth root of unity, so its trace 
as an element of k equals 1, whence Xq + Og is of the form y{0)^ + y{0) with 
2/(0) £ k.) This proves that M has minimal norm 22 and normalized center 
density 11^^/2^'^'^. 

Enumerating all the minimal vectors is a more demanding task. There are 
264 _ possibilities for the ^ coefficients, far too many for an exhaustive search. 
But our equations have many automorphisms, coming from the symmetries of M 
described in Q (after the proof of Prop. 2). We saw already the 65 ■ 2^^ maps 

x{t)^x{at + b) {a,bek, a^^ ^1). (28) 

We may augment these by a: 1-^ ax for (again inherited from Aut(i?o)) and 
by the twelve field automorphisms of k Eqn.22]. This lowers the total to 
(63 • 2'^0)/(3 • 12) « 2 ■ 10^^ The 8-element quaternion group acting on Eq also 
acts on the minimal vectors, but only by permuting the 8 choices of xq and y(0) 
associated to each valid sextuple of ^ cofficients. Thus these automorphisms do 
not further cut down our search space, though the condition that xq and y(0) 
must be in k will somewhat reduce the average work per candidate. 

We might now organize the search as follows. Initialize various tables for arith- 
metic in fc, such as multiplication and multiplicative inverse, squaring, and 
exponentiation. (For addition we use the bitwise exclusive-or operator that 
is already built into the programming language C.) Using the automorphisms 
t I— > at, we may assume that X21 is in the quadratic subfield of k. Thanks 
to X i—f ax, we may further limit attention to one representative of each of the 
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21 cosets of the cube roots of unity in Fg4. Each of these 21 choices of 2:21 then 
represents 3(2^ + 1) = 195 choices of X21 in k* . Then, since t 1-^ t + b fixes 2:21 
and translates xn by 

b'^X2i + b^xig = b'^x^i + = ^21 {{b^x:^!? + b'^X2i) . (29) 

we may assume that xn is either or X2iag, each possibiUty representing 2^^ 

3/2 

choices of xn 6 k and still invariant under one translation t <-> t + X21 ■ This 
translation does not affect xia, but (for most choices of X21 and Xiz) does move 
Xg. Using this translation as well as the 12 field automorphisms reduces the 
21-2-2'i-2i2 = 21-21^ possibilities for (2;i2, 117, xis, Sg) to slightly over 21 -21724 
or about 10^ choices. For each of these, we use (fsjff.), or the recursion (p^, to 
compute a;22, S20; a^ig, a;i8, xiq, xh, X3. Then loop over 2^^ choices of ccs, xi G k. 
For each one, solve the equations ( p^ with jo = 45, 41, 37, 33, 29, 25, 21 to obtain 
Xi2:Xio^ xs, xg, 0:4, a;2, and + Xq. Look up a precomputed table to choose xq 
and solve ( |25| ) for y(0), if solutions exist in k (if not, proceed to the next (xs, xi) 
pair). If one of the eight possible (xo,j/(0)) is defined over k, then all are, but 
we need only try one because they constitute an orbit under the 8-element 
quaternion group. Using the chosen xo, check whether the conditions (|lj) for 
odd jo ^ 19 are all satisfied. The kissing number is the sum of the orbit sizes 
of the resulting minimal points of E. 

Unfortunately the size 2-10^^ of the search space is too large for this computation 
to conclude in reasonable time. Fortunately the jo = 19 equation, expanded as 
a polynomial in the ^ coefficients, is a quadratic equation in x}^, namely 

Axf+A^xf^S, where A ^ xlf x^^ + xlfxf xf^xf + x\f (30) 

and B is 

(^272 I ^ „64\^64 , ^576^48 i ('„480„16 , ^880 , ^ „672 , „100 , „4 ^48N„32 
1^X21 "rX]^3X2i;Xg + X21 Xg -1-^X21 X5 -|- X21 -r X]^3X2i "I" X21 -rX23X2i;Xg 

_i_/'t,384^32 I ^1184 , ^2 ^7&S,\^W , „288^48 , /'^688 , ^ t,480\„32 
"•"^■^21 -^5 "T -^21 T" •^13'''21 Mg "T ■''21 -^5 ^-^21 ■^13'^21 

,(^2 ^672 I ^4 „256\„16 , ,'^,608 1 „2 ^192\„4 
-|-(^X]^3X22 -|- X]^3X2x ^Xg -|- 1^X22 X23X21 yxg 

I „3 ^864 I „708 I „5 „448 , „2 „292 , „2 „97 /"oi A 

+Xi^X2i + X21 +2^132^21 + 2;]^3X2i +a;i3a'2i- \p'-) 

Ugly as this may look, it is much better than looping over xi — especially 
since most of the computation of B can be done independently of X5. Except 
in the rare case that A = i? = 0, we are thus left with either 2 or choices 
of Xi for each X21, X17, X13, Xg, X5. It is then feasible to test every possible 
(x2i, X17, X13, Xg, X5, Xi) as outlined in the preceding paragraph. 

We ran this computation and found a total of 2940 orbits of minimal points, 
with stabilizers of orders distributed as follows: 



|Stab| 


1 2 3 4 6 8 12 24 


# 


2766 134 21 11 3 1 3 1 



(For instance, ( |2q , p7| ) is in one of the orbits with a 6-element stabilizer, com- 
ing from Gal(fc/F4). See http://www.math.harvard.edu/~elkies/mvl28.txt for a 
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full list of orbit representatives.) Summing l/|Stab| over the orbits, and mul- 
tiplying the resulting total of 8531/3 by the number 2^^ • 65 • 24 ■ 12 of known 
automorphisms of M, we obtain the kissing number (|^) of M. □ 

Remarks and questions. The unique orbit with a 24-element stabilizer is 
represented by a point P with ^ coefficients 

(x2i,a;i7,xi3,a;9,a;5,a::i) = (l,a, l,a+ l,a^ + + a, + 1), (33) 

where a is a fifth root of unity. This formula clearly shows three stabilizing 
automorphisms (from Gal(fc/Fig)), but in fact P is stabilized by two automor- 
phisms for each element of Gal(fc/F2): translating t by either or a'^ -I- 1 has 
the same effect on its a;-coordinate as applying the Galois automorphism c i-^ 
of k. This yields a cyclic stabilizer of order 24. 

Can the simple form Axf^ + A^x\^ — B of (|30| ) be explained conceptually? Can 
the kissing number (Q), and more generally the kissing numbers of our Mordell- 
Weil lattices in dimensions 2"+^, be obtained without such a long computation 
(which seems out of the question already for the next case n = 7)7 Must 
there always be some nonzero vectors in the narrow Mordell-Weil lattice whose 
norm attains the lower bound 2 [(2" + 4)/6j of Thm.l]? Finally, can it be 
shown that the 48n(g^ -I- q^) known automorphisms of MW2n+i constitute its 
full automorphism group once n ^ 4? 

A final remark: multiplication of t by a fifth root of unity generates an auto- 
morphism of M of order 5; the sublattice fixed by this automorphism is the 
Mordell-Weil lattice of + y = x'^ + t^^ + Og , and is thus homothetic with the 
Leech lattice by . 
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